ruflo/plugins/ruflo-aidefence/docs/adrs/0001-aidefence-contract.md at main

admin/ruflo

0 Fork 0

mirror of https://github.com/ruvnet/ruflo.git synced 2026-10-23 03:47:00 +09:00

Files

T

ReuvenandRuFlo 02eee0bcdc docs(adr): bulk-update plugin contract ADR statuses (sweep)

- 27 plugins moved Proposed → Accepted (shipped versions, in marketplace)
  - 0 plugins kept as Proposed (all have real versions ≥ 0.2.0)

Per-plugin breakdown:
  ruflo-aidefence    v0.2.0  Accepted — 3-gate pattern, 6 aidefence_* tools
  ruflo-autopilot    v0.2.0  Accepted — 10 autopilot_* tools, /loop integration
  ruflo-core         v0.2.1  Accepted — MCP server contract, plugin-catalog discovery
  ruflo-cost-tracker v0.16.1 Accepted — namespace-routing fix, ADR-097 budget integration
  ruflo-daa          v0.2.0  Accepted — 8 daa_* tools, intelligence-pipeline alignment
  ruflo-ddd          v0.2.0  Accepted — AgentDB domain graph, SPARC Architecture-phase
  ruflo-docs         v0.2.0  Accepted — document worker dispatch, drift detection
  ruflo-federation   v0.2.0  Accepted — ADR-097 Phase 1+2, 3-gate alignment
  ruflo-goals        v0.2.0  Accepted — 6 namespaces, GOAP + dossier ADR-099
  ruflo-iot-cognitum v0.2.0  Accepted — 5-tier trust, 6 background workers
  ruflo-jujutsu      v0.2.0  Accepted — 6 analyze_* tools, ADR-compliance cross-link
  ruflo-knowledge-graph v0.2.0 Accepted — embeddings_generate fix, pathfinder
  ruflo-loop-workers v0.2.0  Accepted — 12 worker triggers, 5 hooks_worker-* tools
  ruflo-market-data  v0.2.0  Accepted — embeddings + namespace-routing bugs fixed
  ruflo-migrations   v0.2.0  Accepted — namespace-routing bug fixed both skills
  ruflo-neural-trader v0.2.0 Accepted — 4 namespaces already compliant
  ruflo-observability v0.2.0 Accepted — namespace-routing bug fixed both skills
  ruflo-plugin-creator v0.2.0 Accepted — scaffolding templates updated with contract
  ruflo-rag-memory   v0.2.0  Accepted — claude-memories reserved namespace consumer
  ruflo-ruvllm       v0.2.0  Accepted — LLM-config + chat-format slice ownership
  ruflo-rvf          v0.2.0  Accepted — portable-memory + session-persistence slice
  ruflo-security-audit v0.2.0 Accepted — 3-gate + audit_1776853149979 regression class
  ruflo-sparc        v0.2.0  Accepted — all 5 SPARC phases cross-linked
  ruflo-swarm        v0.2.0  Accepted — 12 MCP tools (4 swarm_* + 8 agent_*)
  ruflo-testgen      v0.2.0  Accepted — testgaps worker + coverage CLI commands
  ruflo-wasm         v0.2.0  Accepted — 10 wasm_* tools, ADR-070 cross-ref
  ruflo-workflows    v0.2.0  Accepted — 10 workflow_* tools, SPARC phase transitions

Each ADR received: updated: 2026-05-09 in frontmatter + Implementation status
section noting version, marketplace presence, and contract element alignment.

Co-Authored-By: RuFlo <ruv@ruv.net>

2026-05-09 15:10:42 -04:00

4.9 KiB

Raw Permalink Blame History

id, title, status, date, updated, authors, tags

title

status

date

updated

authors

Context

ruflo-aidefence documents the AIDefence MCP family (aidefence_scan, _analyze, _stats, _learn, _is_safe, _has_pii) — 6 tools at v3/@claude-flow/cli/src/mcp-tools/security-tools.ts:108, 191, 277, 329, 424, 479. Plugin is at v0.2.0 with full surface coverage and a "Defence-in-depth pairing" block already documenting the host-level hardening (loader-hijack denylist, file mode 0600, encryption-at-rest opt-in).

Gaps observed against the pattern from ruflo-ruvector / ruflo-agentdb / ruflo-browser / ruflo-intelligence / ruflo-adr ADRs:

No plugin-level ADR. Every other plugin updated this session has one.
No smoke test.
Free-form security-patterns namespace. The agent writes there without referencing ruflo-agentdb ADR-0001's namespace convention.
No Compatibility section.
The ruflo-browser ADR-0001 §4 mandates three AIDefence gates (PII pre-storage, cookie sanitization, prompt-injection check on returned content) — ruflo-aidefence should canonicalize this 3-gate pattern so other plugins consume it the same way.

Decision

1. Add this ADR (Proposed)

docs/adrs/0001-aidefence-contract.md. Cross-links the five sibling ADRs.

2. README augmentation

Append three sections, retain existing content:

Compatibility — pin to @claude-flow/cli v3.6.
Namespace coordination — security-patterns as the canonical namespace this plugin owns; defer to ruflo-agentdb ADR-0001 §"Namespace convention".
The 3-gate pattern — formalize the gates ruflo-browser ADR-0001 §4 already uses. Three gates, every consumer plugin handling untrusted content should apply them in this order:
1. Pre-storage PII gate (aidefence_has_pii) — before any AgentDB / memory_store write
2. Sanitization gate (aidefence_scan) — for cookies, tokens, high-entropy blobs; vault rather than embed
3. Prompt-injection gate (aidefence_is_safe) — for any extracted content flowing back to an LLM
Architecture Decisions + Verification sections.

3. Plugin metadata

plugin.json keeps 0.2.0 (already at the cadence). Description retained. Keywords add prompt-injection, defense-in-depth, mcp.

4. Smoke contract (`scripts/smoke.sh`)

10 checks:

plugin.json declares 0.2.0 with the new keywords.
All 6 aidefence_* MCP tools referenced in plugin docs.
transfer_detect-pii is also referenced (used by pii-detect skill).
README has Compatibility section pinning to v3.6.
README defers to ruflo-agentdb ADR-0001 namespace convention.
README documents the 3-gate pattern (PII pre-storage, sanitization, prompt-injection).
README's "Defence-in-depth pairing" block remains intact (loader-hijack denylist, file mode 0600, encryption-at-rest).
ADR-0001 exists with status Proposed.
Both skills (safety-scan, pii-detect) have valid frontmatter (name + description + allowed-tools).
No skill grants wildcard tool access.

Consequences

Positive:

3-gate pattern is now contractually owned by this plugin; consumer plugins reference it instead of re-deriving.
Joins the contract every other plugin updated this session follows.
security-patterns namespace is now declared.

Negative:

One downstream plugin (ruflo-browser) embeds the 3-gate pattern in its own ADR §4. Updating it to defer here is a separate, mechanical task (the gates remain identical; only the canonical home changes).

Neutral:

No new MCP tools, no new skills, no new commands. Documentation + smoke only. Plugin behavior unchanged.

Verification

bash plugins/ruflo-aidefence/scripts/smoke.sh
# Expected: "10 passed, 0 failed"

plugins/ruflo-ruvector/docs/adrs/0001-pin-ruvector-0.2.25.md
plugins/ruflo-agentdb/docs/adrs/0001-agentdb-optimization.md — namespace convention
plugins/ruflo-browser/docs/adrs/0001-browser-skills-architecture.md — §4 codifies the 3-gate pattern this ADR canonicalizes
plugins/ruflo-intelligence/docs/adrs/0001-intelligence-surface-completeness.md
plugins/ruflo-adr/docs/adrs/0001-adr-plugin-pattern.md
v3/@claude-flow/cli/src/mcp-tools/security-tools.ts — 6 aidefence_* tool definitions

Implementation status

Plugin version v0.2.0 shipped and listed in marketplace.json. Source exists at plugins/ruflo-aidefence/. Contract elements implemented: 3-gate pattern (PII pre-storage gate via aidefence_has_pii, sanitization gate via aidefence_scan, prompt-injection gate via aidefence_is_safe); ADR-097 budget integration deferred (Phase 3); smoke-as-contract gate defined in scripts/smoke.sh.

4.9 KiB Raw Permalink Blame History